IBM webMethods Integration Server: Authentication bypass (CVE-2026-117545)
IBM webMethods Integration Server 12.1 contains an improper authentication vulnerability that permits a remote authenticated attacker to bypass security restrictions.
CVE search metadata
CVE search record: CVE-2026-117545. Severity: high. CVSS: 8.8. KEV: no. Product: webMethods Integration Server (12.1). Brief: IBM webMethods Integration Server: Authentication bypass (CVE-2026-117545). Brief link: https://feed.craftedsignal.io/briefs/2026-11-ibm-webmethods-auth-bypass/
Triage facts
Revision 2- Applicability
- webMethods Integration Server (12.1)
- Evidence
- Unknown
- Severity
- High
- Sources
- 2 public sources
- Freshness
- Revision 2Nov 8, 20:57 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
poc_available
Changed: claim_state, has_poc, lastmod, poc_references, references, updates
Sources: 1
IBM webMethods Integration Server 12.1 is vulnerable to an improper authentication flaw (CVE-2026-117545). This vulnerability could allow a remote authenticated attacker to bypass security restrictions. The issue has been assigned a CVSS v3.1 Base Score of 8.8.